Secure pairing of electronic devices using dual means of communication

The present invention generally relates to the secure paring of two electronically controlled devices adapted to communicate with each other. In a specific embodiment the invention relates to a medical delivery device in combination with a control unit for controlling the delivery device, however, the invention is applicable for all types of devices for which a secure pairing is an issue.

BACKGROUND OF THE INVENTION

In the disclosure of the present invention reference is mostly made to the treatment of diabetes by infusion of insulin, however, this is only an exemplary use of the present invention.

Portable drug delivery devices for delivering a drug to a patient are well known and generally comprise a reservoir adapted to contain a liquid drug, a pump assembly for expelling a drug out of the reservoir and through the skin of the subject via a transcutaneous access device such as a soft cannula or a needle. Such devices are often termed infusion pumps.

Basically, infusion pumps can be divided into two classes. The first class comprises durable infusion pumps which are relatively expensive pumps intended for 3-4 years use, for which reason the initial cost for such a pump often is a barrier to this type of therapy. Although more complex than traditional syringes and pens, the pump offer the advantages of continuous infusion of insulin, precision in dosing and optionally programmable delivery profiles and user actuated bolus infusions in connections with meals. Such pumps are normally carried in a belt or pocket close to the body.

Addressing the above cost issue, several attempts have been made to provide a second class of drug infusion devices that are low in cost yet convenient to use. Some of these devices are intended to be partially or entirely disposable and may provide many of the advantages associated with an infusion pump without the attendant costs. For example, <patcit id="pcit0001" dnum="US6589229B"><text>US 6,589,229</text></patcit> discloses a skin-mountable drug infusion device which may have a two-part construction in which more expensive electronic components are housed in a reusable portion and the fluid delivery components are housed in a separable disposable portion (i.e. intended for single use only). <patcit id="pcit0002" dnum="US6656159B"><text>US patent 6,656,159</text></patcit> discloses a skin-mountable drug infusion device which is fully disposable.

The traditional durable pump may be worn in a belt at the waist of the user, this allowing the user to operate the pump by directly accessing the user interface on the pump, e.g. in order to change infusion rate or to program a bolus infusion. However, the pump may also be worn hidden under clothing this making operation more difficult.

Correspondingly, it has been proposed to provide an infusion pump of the durable type with a wireless remote controller allowing the user to access some or all of the functionality of the pump, see for example <patcit id="pcit0003" dnum="US6551276B"><text>US 6,551,276</text></patcit>, <patcit id="pcit0004" dnum="US20030065308A"><text>US 2003/0065308</text></patcit>, <patcit id="pcit0005" dnum="US20050022274A"><text>US 2005/0022274</text></patcit>, <patcit id="pcit0006" dnum="US20050171513A"><text>US 2005/ 0171513</text></patcit> (on which the pre-amble of claim 1 is based), <patcit id="pcit0007" dnum="US20060017576A"><text>US 2006/0017576</text></patcit> and <patcit id="pcit0008" dnum="US20060020300A"><text>US 2006/ 0020300</text></patcit>. The pump and controller may be adapted to communicate with further devices, e.g. <patcit id="pcit0009" dnum="US20050171513A"><text>US 2005/0171513</text></patcit> discloses a remote controller which may also communicate with external devices such as a glucose monitor, cell phone, PDA or computer using its RF transmitter/receiver, <patcit id="pcit0010" dnum="US20060017576A"><text>US 2006/0017576</text></patcit> discloses an implantable pump which has two different communication means allowing it to communicate with two different external control devices, and <patcit id="pcit0011" dnum="US20060020300A"><text>US 2006/0020300</text></patcit> discloses an implantable device to which an external antenna can be coupled to increase communication distance before implantation.

For a skin-mountable device, typically comprising an adhesive allowing the device to be attached directly to the skin of the user, a remote controller would appear even more desirable. Correspondingly, <patcit id="pcit0012" dnum="US6589229B"><text>US 6,589,229</text></patcit> and <patcit id="pcit0013" dnum="US6740059B"><text>US 6,740,059</text></patcit> disclose semi-disposable and fully disposable infusion devices (which may be termed a local device or unit) which are intended to be operated primarily or entirely by a wireless remote controller (which may be termed a remote device or unit). As the delivery device thus does not have to be provided with a user interface such as a display and keyboard, the semi-disposable or disposable infusion can be provided more cost-effectively.

In order to provide safe operation of a given delivery device it is of utmost importance that control commands sent from a given remote control unit does only control actuation of the specific delivery device it is intended to control, and not some other delivery device in the proximity of the user. Further, as the delivery device may be adapted to transmit information back to the remote controller, it is also essential that such information is only received by the corresponding control unit. This issue is applicable to both durable systems and systems comprising disposable units. To provide the desired security the two devices intended to work together will normally be "paired" by exchange of information between the two devices, this allowing the information sent between the two devices to be specifically coded and thus only accepted by the correspondingly coded device. As appears, when a specific remote controller is to be paired with a specific delivery device it is of utmost importance that it is in fact the two devices which are intended to be paired that are actually paired - and not that the remote controller is accidentally being paired with a neighboring delivery. During a pairing process other information may also be transmitted between the two devices, e.g. the controller may be provided with information as to the type of delivery device in case different types of delivery devices are intended to be used with a given remote controller.

However, even if a remote controller has been correctly paired with a given delivery device, it may still be possible to control the delivery device in an undesired way. For example, if a remote controller comes into the hands of a third person, it may be possible for that person to control the delivery device, typically without the knowledge of the user of the delivery device. For example, a child may find the remote controller and start to play with it, this resulting in the inadvertently transmission of infusion commands to the delivery device, e.g. the infusion of a bolus of insulin.

Having regard to the above, it is the object of the present invention to provide devices allowing secure paring of two electronically controlled devices adapted to communicate with each other, either one-way or two-way. It is a further object of the invention to provide such devices which provide safety of use and which to a high degree protect against the inadvertent transmission of data, e.g. commands, between two electronically controlled devices.

DISCLOSURE OF THE INVENTION

In the disclosure of the present invention, embodiments and aspects will be described which will address one or more of the above objects or which will address objects apparent from the below disclosure as well as from the description of exemplary embodiments.

Thus, in a first aspect the present invention provides a medical system as defined in claim 1. In this way different properties of the two means of communication can be used to secure that certain data, e.g. during pairing of the two devices, can be transmitted in a more controlled way whereas other data can be transmitted in a less controlled way. The system may comprise additional units just as it may comprise additional means of communication. Although the data of the two defined groups are transmitted using the two different means of communication, a third group of data may be provided which can be transmitted using either of the two means of communication. Such a third group of data may also be considered to represent "overlapping" members of first and second groups of data. Indeed, the first and second groups cannot be fully overlapping as this would render the definition of two groups meaningless. The determination of which data type is arranged in which group may be preset, or the group for some or all of the data types may be selectable, e.g. by a physician.

The two groups of data types may comprise partly overlapping members, e.g. at least one data type may only be transmitted by one of the first and second means of communication, and at least one data type may be transmitted by both of the first and second means of communication.

In an exemplary embodiment at least one means of communication comprises a wireless transmitter and corresponding receiver. For example, the first means of communication may be selected from the group comprising RF communication, optical communication, ultrasonic communication, induction and a galvanic contact, and the second means of communication may be selected from the group comprising RF communication, ultrasonic communication, and optical communication.

To control transmission of data, the first means of communication has a shorter range of communication than the second means of communication under given conditions. For example, under the given conditions the first means of communication may be NFC (near-field communication) having a range of communication less than 0.5 meter, preferably less than 0.2 meter and most preferably less than 0.1 meter, and the second means of communication has a range of communication of more than 0.5 meter, preferably more than 1 meter and most preferably more than 3 meter. The "given conditions" would normally be such conditions that can be found in a normal home or work environment, e.g. as in an office. Both the first and second means of communication may be by wireless communication. For example, the first means of communication may be RF communication at a frequency of less than 24 MHz, and the second means of communication may be RF communication at a frequency of more than 24 MHz.

By using NFC between the first and second units for some type of data, a high degree of protection against inadvertent pairing of units can be provided. Correspondingly, the first group of data types comprises a unique ID for the second unit, which ID can then only be received by the intended first unit when the two units are in close proximity of each other. To further enhance safety also the second group of data types may comprise a unique ID for the first unit which is then transmitted to the second unit in return for the first ID. Further, to protect against the unintended use of e.g. a remote controller to control a drug delivery device, the first group of data types may comprise an activation (or authorisation) command, the first unit being adapted to allow one or more types of commands from the second group of data types to be received and executed for a given period of time after an activation command has been received. For example, to send a bolus command to a drug delivery device the remote controller would first have to brought close to a given drug delivery device and an activation command transmitted, this action opening a time window of e.g. 5 minutes in which a bolus command will be accepted by the drug delivery device when received using the second means of communication.

At least one of the means of communication may provide uni-directional communication only between the two units. For example, in an advanced drug delivery system using the second means of communication commands bi-directionally, instructions and programs may be transmitted from a remote controller to a drug delivery device, just as e.g. acknowledgement, status and error information may be transmitted from the drug delivery device to the remote controller. However, transmission of pairing information and activation commands may require the first means of communication to be only uni-directionally.

In an exemplary embodiment the medical system may comprise an acoustic transducer (e.g. loudspeaker) having a transducer coil with a plurality of windings, the transducer coil serving as a receiver for wireless inductive signals, e.g. RF signals. In this way a "parasite" property of the acoustic transducer can be used, i.e. using the coil as a receiving means, thereby replacing a receiving structure, e.g. a separate receiver coil or an antenna, which would otherwise have to be provided, this reducing manufacturing costs.

The different aspects of the present invention may be adapted in a wide range of systems in which safe pairing of units is of importance and the two units may correspondingly have any desirable functionality. For example, the first unit may be a process unit adapted to process received data, e.g. a drug delivery device adapted to deliver an amount of drug in accordance with received instructions, or a sensor device adapted to process and/or transmit sensor data from an associated sensor, and the second unit may be a remote controller adapted to e.g. transmit instructions or to receive and store sensor data. Each of the units may be of unitary construction or it may be adapted to be used in combination with one or more further units or means.

Thus, a medical system is provided in which a process unit comprises a process unit transmitter, a process unit receiver, and a process unit processor connected to the process unit transmitter, the process unit receiver and the transducer coil. A controller unit comprises a first controller unit transmitter adapted to transmit information to the transducer coil, a second controller unit transmitter adapted to transmit information to the process unit receiver, a controller unit receiver adapted for receiving information from the process unit transmitter, and a controller unit processor connected to the first and second controller unit transmitters and the controller unit receiver, wherein the first means of communication comprises the transducer coil and the first controller unit transmitter, and the second means of communication comprises the process unit transmitter, the process unit receiver, the second controller unit transmitter, and the controller unit receiver.

In the context of the present application and as used in the specification and claims, the term processor covers any combination of electronic circuitry suitable for providing the specified functionality, e.g. processing data and controlling memory as well as all connected input and output devices. The processor will typically comprise one or more CPUs or microprocessors which may be supplemented by additional devices for support or control functions. For example, a transmitter or a receiver may be fully or partly integrated with the processor, or may be provided by individual units. Each of the components making up the processor circuitry may be special purpose or general purpose devices.

The process unit may comprise a reservoir adapted to contain a fluid drug, an expelling assembly adapted for cooperation with the reservoir to expel fluid drug from the reservoir to a subject via an outlet, and processor means for controlling the expelling assembly. The reservoir may be any suitable structure adapted to hold an amount of a fluid drug, e.g. a hard reservoir, a flexible reservoir, a distensible or elastic reservoir. The reservoir may e.g. be pre-filled, user-fillable or in the form of a replaceable cartridge which again may be prefilled or fillable. The expelling assembly may be of any desired type, e.g. a membrane pump, a piston-cylinder pump or a roller-tube pump. Advantageously, the processor means is adapted to receive flow instructions from a control unit, the control unit comprising a user interface allowing a user to enter flow instruction for subsequent transmission to the process unit, e.g. programming a basal infusion rate profile or a bolus. The process unit may be adapted to be implanted or the outlet may comprise or be adapted to connect to a transcutaneous access device, thereby allowing a fluid drug to be expelled out of the reservoir and through the skin of the subject via the transcutaneous access device. In such a medical system the first group of data types may comprise at least one type of command controlling the delivery of an amount of fluid drug to the subject. For example, when a user desires to program a bolus infusion of a drug such as insulin, such an instruction can only be transmitted to the process unit when the remote controller is moved into the vicinity thereof, this preventing to a high degree that other people will be able to pick up a given remote controller and inadvertently transmit a bolus or other infusion command to a drug delivery device controlled by that remote controller.

Alternatively, the first unit may comprise a processor adapted to transmit and/or process data acquired via a sensor device, and may include a transcutaneous sensor device adapted for cooperation with the processor.

The medical system of the invention may further comprise a transcutaneous device unit comprising a transcutaneous device, e.g. access device or sensor device, a mounting surface adapted for application to the skin of a subject, e.g. an adhesive surface, wherein the transcutaneous device unit and the first unit are adapted to be secured to each other to form a combined device.

In a further aspect of the invention, a medical system is provided comprising a first unit and a second unit, the system comprising first means of communication allowing a first group of data types to be transmitted between the first unit and the second unit. The first unit further comprises an element serving a first purpose, wherein a parasite property of the element serves as a wireless receiver. The element may be a metal chassis part serving also as an antenna, or, as described below, a loudspeaker in which the coil is used to pick up induction signals.

Thus, in a specific aspect of the invention, a medical system is provided comprising a first unit and a second unit, the system comprising first means of communication allowing a first group of data types to be transmitted between the first unit and the second unit, the first unit comprising an acoustic transducer having a transducer coil with a plurality of windings, the transducer coil serving as a receiver for wireless inductive signals. In this way a "parasite" property of the acoustic transducer can be used, i.e. using the coil as a receiving means, thereby replacing a receiving structure, e.g. a separate receiver coil or an antenna, which would otherwise have to be provided, this reducing manufacturing costs. The term "first" merely denotes that further means of communication may be provided.

The first unit may be a process unit comprising a process unit processor connected to the transducer coil, and the second unit may be a controller unit comprising a first controller unit transmitter adapted to transmit information to the transducer coil, and a controller unit processor connected to the first controller unit transmitter, wherein the first means of communication comprises the transducer coil and the first controller unit transmitter.

The medical system may further comprise second means of communication allowing a second group of data types to be transmitted between the first unit and the second unit. The first means of communication may have a shorter range of communication than the second means of communication under given conditions. The second means of communication may be either RF or optical communication. Under the given conditions the first means of communication may have a range of communication less than 0.5 meter, and the second means of communication has a range of communication of more than 0.5 meter. The first means of communication may use RF communication at a frequency of less than 24 MHz, and the second means of communication may use RF communication at a frequency of more than 24 MHz.

In an exemplary embodiment a medical system is provided as disclosed above, in which both the first and second means of communication provides uni-directional communication only between the two units. In such a system the first unit may be a process unit comprising a process unit receiver, and a process unit processor connected to the process unit receiver and the transducer coil. The second unit may be a controller unit comprising a first controller unit transmitter adapted to transmit information to the transducer coil, a second controller unit transmitter adapted to transmit information to the process unit receiver, and a controller unit processor connected to the first and second controller unit transmitters, wherein the first means of communication comprises the transducer coil and the first controller unit transmitter, and the second means of communication comprises the process unit receiver and the second controller unit transmitter.

In another exemplary embodiment a medical system is provided as disclosed above, in which the first means of communication provides uni-directional communication from the second unit to the first unit, and the second means of communication provides bi-directional communication between the first unit and the second unit. In such a system the first unit may be a process unit comprising a process unit transmitter, a process unit receiver, and a process unit processor connected to the process unit transmitter, the process unit receiver and the transducer coil. The second unit may be a controller unit comprising a first controller unit transmitter adapted to transmit information to the transducer coil, a second controller unit transmitter adapted to transmit information to the process unit receiver, a controller unit receiver adapted for receiving information from the process unit transmitter, and a controller unit processor connected to the first and second controller unit transmitters and the controller unit receiver, wherein the first means of communication comprises the transducer coil and the first controller unit transmitter, and the second means of communication comprises the process unit transmitter, the process unit receiver, the second controller unit transmitter, and the controller unit receiver.

In the above-described medical systems the first group of data types may comprise a unique ID for the second unit and/or a time stamp. The first group of data types may also comprise an activation command, the first unit being adapted to allow one or more types of commands from the second group of data types to be received and executed for a given period of time after an activation command has been received.

In an exemplary embodiment a medical system as described above is provided in which the first unit comprises a reservoir adapted to contain a fluid drug, an expelling assembly adapted for cooperation with the reservoir to expel fluid drug from the reservoir to a subject via an outlet, and processor means for controlling the expelling assembly.

Thus, a medical unit is provided comprising first means of communication allowing a first group of data types to be transmitted between the unit and a further unit, the first unit comprising an acoustic transducer having a transducer coil with a plurality of windings, the transducer coil serving as a receiver for wireless inductive signals. In exemplary embodiments the medical unit may be in the form of any of the above-described first and second units, such first and second unit being adapted to communicate with a corresponding second or first unit as described.

The invention allows a method of operating a medical system comprising first and second units, the method comprising the steps of (i) providing a medical system having first and second units, (ii) transmitting a first group of data types between the first unit and the second unit using first means of communication, and (iii) transmitting a second group of data types between the first unit and the second unit using second means of communication. One or both means of communication may be wireless.

As used herein, the term "drug" is meant to encompass any drug-containing flowable medicine capable of being passed through a delivery means such as a cannula or hollow needle in a controlled manner, such as a liquid, solution, gel or fine suspension. Representative drugs include pharmaceuticals such as peptides, proteins, and hormones, biologically derived or active agents, hormonal and gene based agents, nutritional formulas and other substances in both solid (dispensed) or liquid form. In the description of the exemplary embodiments reference will be made to the use of insulin. Correspondingly, the term "subcutaneous" infusion is meant to encompass any method of transcutaneous delivery to a subject.

BRIEF DESCRIPTION OF THE DRAWINGS

In the following the invention will be further described with reference to the drawings, wherein <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">figs. 1-3</figref> shows in perspective views sequences of use for a first embodiment of a drug delivery device,</li><li><figref idref="f0002">fig. 4</figref> shows perspective view of the interior of the reservoir unit of <figref idref="f0001">fig. 1</figref>,</li><li><figref idref="f0003">fig. 5</figref> shows a schematic representation of a process unit and a control unit,</li><li><figref idref="f0004">fig. 6</figref> shows a further schematic representation of a local unit and a remote unit,</li><li><figref idref="f0005 f0006 f0007">figs. 7A-7C</figref> show in schematic form a circuitry divided in three images (to be read in directions from A to C),</li><li><figref idref="f0008">figs. 8A-8K</figref> (numeral 8(l) not used) show steps of a pairing procedure between two medical units, and</li><li><figref idref="f0004">figs. 9A-9D</figref> show steps of transmitting a command between two medical units.</li></ul>

In the figures like structures are mainly identified by like reference numerals.

DESCRIPTION OF EXEMPLARY EMBODIMENTS

When in the following terms such as "upper" and "lower", "right" and "left", "horizontal" and "vertical" or similar relative expressions are used, these only refer to the appended figures and not to an actual situation of use. The shown figures are schematic representations for which reason the configuration of the different structures as well as there relative dimensions are intended to serve illustrative purposes only.

Before turning to the present invention <i>per se,</i> a system suitable to be used in combination therewith will be described, the system comprising a pump unit (i.e. local unit), a patch unit adapted to be used in combination with the pump unit, and a remote control unit for wireless communication with the pump unit. However, the present invention may be used in any system or unit in which the features of the present invention would be relevant, e.g. in a conventional durable infusion pump or system, or in a sensor system.

Firstly, with reference to <figref idref="f0001">figs. 1-3</figref> an embodiment of a medical device for drug delivery will be described focusing primarily on the directly user-oriented features during application of the device to a skin surface. The patch unit 2 comprises a transcutaneous device in the form of a hollow infusion device, e.g. a needle or soft cannula, however, the needle or cannula may be replaced with any desirable transcutaneous device suitable for delivery of a fluid drug or for sensing a body parameter.

More specifically, <figref idref="f0001">fig. 1</figref> shows a perspective view of medical device in the form of a modular skin-mountable drug delivery device 1 comprising a patch unit 2 and a pump unit 5 (as the pump unit comprises a reservoir it may also be termed a reservoir unit). When supplied to the user each of the units are preferably enclosed in its own sealed package (not shown). The embodiment shown in <figref idref="f0001">fig. 1</figref> comprises a patch unit provided with an insertable transcutaneous device, e.g. needle, cannula or sensor. In case an actual embodiment requires the patch unit to be mounted on the skin and the transcutaneous device inserted before a pump or other unit can be attached, it follows that the method of use would be adopted correspondingly.

The patch unit comprises a flexible patch portion 10 with a lower adhesive mounting surface 12 adapted for application to the skin of a user, and a housing portion 20 in which a transcutaneous device (not shown) is arranged. The transcutaneous device comprises a pointed distal end adapted to penetrate the skin of a user, and is adapted to be arranged in fluid communication with the pump unit. In the shown embodiment the pointed end of the transcutaneous device is moveable between an initial position in which the pointed end is retracted relative to the mounting surface, and an extended position in which the pointed end projects relative to the mounting surface. The transcutaneous device may also be moveable between the extended position in which the distal end projects relative to the mounting surface, and a retracted position in which the distal end is retracted relative to the mounting surface.

The patch unit further comprises user-gripable actuation means in the form of a first strip-member 21 for moving the transcutaneous device between the initial and the second position when the actuation means is actuated, and a user-gripable second strip-member 22 for removing the patch from the skin surface. The second strip may also me used to move the distal end of the transcutaneous device between the extended and the retracted position. The housing further comprises user-actuatable male coupling means 31 in the form of a pair of resiliently arranged hook members adapted to cooperate with corresponding female coupling means 51 on the pump unit, this allowing the pump unit to be releasable secured to the patch unit in the situation of use. A flexible ridge formed support member 13 extends from the housing and is attached to the upper surface 11 of the patch. The adhesive surface is supplied to the user with a peelable protective sheet.

The pump unit 5 comprises a pre-filled reservoir containing a liquid drug formulation (e.g. insulin) and an expelling assembly for expelling the drug from the reservoir through the needle in a situation of use. The reservoir unit has a generally flat lower surface adapted to be mounted onto the upper surface of the patch portion, and comprises a protruding portion 50 adapted to be received in a corresponding cavity of the housing portion 20 as well as female coupling means 51 adapted to engage the corresponding hook members 31 on the needle unit. The protruding portion provides the interface between the two units and comprises a pump outlet and contact means (not shown) allowing the pump to detect that it has been assembled with the patch.

In a situation of use the user assembles the two units which are then mounted on a skin surface where after the transcutaneous device is inserted and the pump is ready to operate. Operation may start automatically as the transcutaneous device is inserted, or the pump may be started via the remote unit, see below. Before the pump unit is mounted to the patch unit, the user will normally have paired the pump unit with the remote unit, see below. In an alternative situation of use the user may first mount the patch unit to a skin surface and insert the transcutaneous device, after which the pump unit is mounted to the patch unit.

After the assembled device has been left in place for the recommended period of time for use of the patch unit (e.g. 48 hours) - or in case the reservoir runs empty or for other reasons - it is removed from the skin by gripping and pulling the retraction strip 22 which may also lead to retraction of the transcutaneous device. The pump unit may be removed from the patch unit before or after the patch unit is removed from the skin. Thereafter the pump unit can be used again with fresh patch units until it has been emptied or the patch has to be changed again.

<figref idref="f0002">Fig. 4</figref> shows the pump unit with an upper portion of the housing removed. The pump unit comprises a reservoir 760 and an expelling assembly comprising a pump assembly 300 as well as processor means 580 and a coil actuator 581 for control and actuation thereof. The pump assembly comprises an outlet 322 for connection to a transcutaneous access device and an opening 323 allowing a fluid connector arranged in the pump assembly to be actuated and thereby connect the pump assembly with the reservoir. The reservoir 560 is in the form of prefilled, flexible and collapsible pouch comprising a needle-penetratable septum adapted to be arranged in fluid communication with the pump assembly. The lower portion of the housing comprises a transparent area (not seen) allowing a user to inspect a portion of the reservoir. The shown pump assembly is a mechanically actuated membrane pump, however, the reservoir and expelling means may be of any suitable configuration.

The processor means comprises a PCB or flex-print to which are connected a microprocessor 583 for controlling, among other, the pump actuation, contacts (i.e. sensors) 588, 589 cooperating with corresponding contact actuators on the patch unit or the remote unit (see below), signal generating means 585 for generating an audible and/or tactile signal, a display (if provided), a memory, a transmitter and a receiver. An energy source 586 provides energy. The contacts may be protected by membranes which may be formed by flexible portions of the housing.

With reference to <figref idref="f0001 f0002">figs. 1-4</figref> a modular local unit comprising a pump unit and a patch unit has been described, however, the local unit may also be provided as a unitary unit.

Although the present invention will be described with reference to the pump unit and the remote controller unit disclosed in <figref idref="f0001 f0002 f0003 f0004">figs. 1-6</figref>, it should be understood that the present disclosure is broadly applicable to any form of system comprising a pump unit in combination with a controller unit or other external unit, e.g. a PC or PDA. For example, the present disclosure may be used with programmable ambulatory insulin infusion pumps of the sort currently commercially available from a number of manufacturers, including without limitation and by way of example, Medtronic MiniMed under the trademark PARADIGM, Insulet Corporation under the trademark OmniPod, Smiths Medical under the trademark Deltec COZMO, and others, these pumps either being provided with a remote control or being adaptable to be used with one.

<figref idref="f0003">Fig. 5</figref> shows a schematic representation of a process unit 200 (here corresponding to the pump unit 5 of <figref idref="f0001">fig. 1</figref>) and a controller unit 100 (here in the form of a wireless "remote controller" or "external communication device" for the pump unit). It is considered that the general design of such units is well known to the skilled person, however, for a more detailed description of the circuitry necessary to provide the desired functionality of the present invention reference is made to <patcit id="pcit0014" dnum="US20030065308A"><text>US 2003/0065308</text></patcit>.

More specifically, <figref idref="f0003">fig. 5</figref> depicts a simplified block diagram of various functional components or modules (i.e. single components or groups of components) included in the pump unit 200 and remote controller 100. The remote controller unit includes a housing 101, a remote processor 110 including a CPU, memory elements for storing control programs and operation data and a clock, an LCD display 120 for providing operation for information to the user, a keypad 130 for taking input from the user, an audio alarm 140 for providing information to the user, a vibrator 150 for providing information to the user, a main battery 160 for supplying power to the controller, a backup battery 161 to provide memory maintenance for the controller, a remote radio frequency (RF) telemetry transmitter 170 for sending signals to the pump unit, a remote radio frequency (RF) telemetry receiver 180 for receiving signals from the pump unit, and a second transmitter 190. The controller further comprises a port 185, e.g. an infrared (IR) or RF input/output system, or a USB port for communicating with a further device, e.g. a blood glucose meter (BGM), a continuous blood glucose meter (CGM), a PC or a PDA.

As also depicted in <figref idref="f0003">fig. 5</figref>, the pump unit 200 includes a housing 201, local processor electronics 210 including a CPU and memory elements for storing control programs and operation data, battery 260 for providing power to the system, a process unit RF telemetry transmitter 270 for sending communication signals to the remote unit, a process unit radio frequency (RF) telemetry receiver 280 for receiving signals from the remote unit, a second process unit receiver 240 (which may be in the form of a coil of an acoustic transducer used in an audio alarm for providing feedback to the user), a reservoir 230 for storing a drug, and a pump assembly 220 for expelling drug from the reservoir through a transcutaneous device to the body of a patient. In alternative embodiments the pump unit may also comprise an LCD display for providing information to the user, a keypad for taking input from the user, and a vibrator or other tactile actuator for providing information to the user. RF transmission may be proprietary or in accordance with a standard protocol such as Bluetooth®.

<figref idref="f0004">Fig. 6</figref> shows a schematic representation of a medical system 400 comprising a process unit 420 and a remote controller unit 410 basically corresponding to the units described with reference to <figref idref="f0003">fig. 5</figref>. The system comprises first means of communication allowing a first group of data types to be transmitted between the first unit and the second unit, and second means of communication allowing a second group of data types to be transmitted between the first unit and the second unit. The first means of communication is by NFC (Near-Field Communication) having a transmitter coil 411 and a receiver coil 421. Transmission may be by induction using a 125 kHz signal providing a range of approximately 10 cm. The receiver coil may form part of a conventional loudspeaker (see below). The second means of communication is bi-directional using 2.4 GHz RF communication using a pair of antennas 412, 422, this providing a range of communication of several meters.

When a new process unit 420 in the form of a pump is to be paired with a given remote controller 410, the controller is arranged in close proximity to the pump unit and a pairing signal is sent by NFC. The signal comprises a pairing start code, a remote ID and a sequential pump number. When the signal has been received by the pump unit an acknowledgement signal is sent using RF transmission, the acknowledgement comprising the remote ID and the sequential pump number. In this way the two units can only transmit and receive signals intended for the paired pump respectively controller unit. When the remote unit is paired with the next pump unit using the next sequential number, only signals to or from the new pump is transmitted respectively received.

<figref idref="f0005 f0006 f0007">Fig. 7</figref> shows in schematic form circuitry adapted to receive signals generated by induction in a coil (e.g. a loudspeaker coil), the signals being transformed from analog to digital representation which can then be processed by a processor in the pump unit. More specifically, an example of a receiver stage optimized for ASIC-implementation is shown. Amplification and double rectifying of the input signal, from the receiver coil, is performed by the differential stage circuit centred around M3 &amp; M5 seen in the middle. The digitalized signal is noise reduced by the Schmidt-trigger circuit seen on the right of the output voltage signal placed over the capacitance, C1.

Next two examples of use of a medical drug delivery system implementing embodiments of the present invention will be described. First, a pump unit comprising an insulin formulation is stored in a refrigerator (<figref idref="f0008">fig. 8A</figref>). When a new pump unit is taken out from the refrigerator (<figref idref="f0008">fig. 8B</figref>), unpacking the pump starts it's electrical life. Before deciding to use the pump unit the expiration date printed on the pump unit is checked by the user (<figref idref="f0008">fig. 8C</figref>). A patch unit is mounted on a suitable skin portion of the user. The user then grabs the patch unit and inserts the pump unit by pressing it into the patch unit (<figref idref="f0008">fig. 8D</figref>). When assembled, the pump unit is ready for pairing which is indicated by a beep signal (<figref idref="f0008">fig. 8E</figref>). Activating the pairing mode allows pairing of the remote (<figref idref="f0008">fig. 8F</figref>). Holding the remote close to the pump starts the pairing using NFC, either automatically or by pressing a key. Pump beeps to confirm pairing and pump unit information is transmitted by RF to the remote unit (<figref idref="f0008">fig. 8G</figref>). When paired the remote unit displays residual insulin and type, this indicating that the units have been paired and information has been properly received from the pump unit. Depending on the set-up of the system, the remote unit can be paired only with a new unit, or also pairing with a partly used pump unit can be allowed, the latter allowing the user to shift between different pumps and thus types of drug (<figref idref="f0008">fig. 8H</figref>). After pressing "Accept" the remote displays "pump paired" and sounds a confirmation beep (<figref idref="f0008">fig. 8J</figref>) after which the remote displays e.g. the currently active rate (<figref idref="f0008">fig. 8K</figref>).

Next, an example of user authentication using NFC in combination with long-range RF communication will be described.

When in the bolus menu, bolus type and amount is set by the user (<figref idref="f0004">fig. 9A</figref>), the user accept the bolus. The display indicates by "safe transmit" that the desired bolus command can only be transmitted using NFC, i.e. by bringing the remote controller into close proximity of the pump unit (<figref idref="f0004">fig. 9B</figref>). Next the user swipes the pump with the remote controller to authenticate the bolus command. Transmission may take place either automatically or this may happen either automatically or by pressing a key. The pump beeps to acknowledge reception of the bolus command (<figref idref="f0004">fig. 9C</figref>) and transmits an acknowledgement to the remote commander using RF communication, the remote controller showing a checkmark in the display to indicate that the bolus command has been correctly received by the pump unit (<figref idref="f0004">fig. 9D</figref>).

In the above description of the preferred embodiments, the different structures and means providing the described functionality for the different components have been described to a degree to which the concept of the present invention will be apparent to the skilled reader. The detailed construction and specification for the different components are considered the object of a normal design procedure performed by the skilled person along the lines set out in the present specification.